2026 CVE Vulnerabilities
52,737 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-14512 | CRITICAL | 9.8 | 0.5% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization whi... |
| CVE-2026-14446 | CRITICAL | 9.8 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the adminis... |
| CVE-2026-13463 | HIGH | 7.5 | 0.2% | Jul 28, 2026 | IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of creden... |
| CVE-2026-13442 | HIGH | 7.1 | 0.2% | Jul 28, 2026 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only... |
| CVE-2026-57511 | MEDIUM | 6.3 | 0.2% | Jul 28, 2026 | SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers to inject... |
| CVE-2026-57510 | HIGH | 8.8 | 0.3% | Jul 28, 2026 | SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers t... |
| CVE-2026-55555 | HIGH | 7.5 | 0.5% | Jul 28, 2026 | Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack thr... |
| CVE-2026-55554 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot bo... |
| CVE-2026-48060 | HIGH | 8.1 | 0.3% | Jul 28, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which... |
| CVE-2026-3158 | MEDIUM | 4.3 | 0.2% | Jul 28, 2026 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM ... |
| CVE-2026-3157 | MEDIUM | 4.3 | 0.2% | Jul 28, 2026 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM ... |
| CVE-2026-1918 | MEDIUM | 4.9 | 0.3% | Jul 28, 2026 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM ... |
| CVE-2026-16347 | HIGH | 8.8 | 0.2% | Jul 28, 2026 | MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessi... |
| CVE-2026-16192 | MEDIUM | 6.5 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability wh... |
| CVE-2026-16184 | CRITICAL | 9.8 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafte... |
| CVE-2026-16107 | MEDIUM | 5.9 | 0.2% | Jul 28, 2026 | IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validat... |
| CVE-2026-11391 | MEDIUM | 6.3 | 0.2% | Jul 28, 2026 | Tanium addressed a SQL injection vulnerability in Patch. |
| CVE-2026-7769 | HIGH | 8.1 | 0.3% | Jul 28, 2026 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM ... |
| CVE-2026-7362 | MEDIUM | 6.5 | 0.2% | Jul 28, 2026 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1... |
| CVE-2026-66745 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability t... |
| CVE-2026-5114 | MEDIUM | 4.9 | 0.3% | Jul 28, 2026 | The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and ... |
| CVE-2026-59932 | HIGH | 7.5 | 0.7% | Jul 28, 2026 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 t... |
| CVE-2026-50738 | MEDIUM | 5.3 | 0.3% | Jul 28, 2026 | A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced aft... |
| CVE-2026-50737 | HIGH | 7.5 | 0.2% | Jul 28, 2026 | When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's... |
| CVE-2026-50736 | HIGH | 7.5 | 0.2% | Jul 28, 2026 | The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscrib... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now